CISA orders federal civilian agencies to patch Log4j vulnerability and 12 others by December 24

The US Cybersecurity and Infrastructure Security Agency added the Log4j vulnerability to its Known Exploited Vulnerabilities Catalog.